MikroTik

volkirik

if the clients (cpes) are not mikrotik set AMSDU to 7935 for compat..

volkirik

I know. But my home AP does not support wave2. Also there is something weird. If i set wifi mtu to 1500, speed is about 100 mbps. If i set wifi mtu to 2290 bytes (max), speed is about 250 MBPS. I just wanted to share with the community and also for WMM; /ipv6 firewall mangle add action=change-mss ch...

volkirik

for your testing; ON ACCESS POINT /queue type set [find] kind=pcq pcq-classifier=src-address,src-port,dst-address,dst-port pcq-limit=12500KiB pcq-total-limit=12500KiB ON CORE ROUTERS: /queue type set [find] kind=pcq pcq-classifier=src-address,src-port,dst-address,dst-port pcq-limit=125000KiB pcq-tot...

volkirik

It is time for USB-EXTRAS package..

USB ethernet adapter and USB wireless adapter drivers seperate package for example realtek branded USB adapters..

volkirik

try decreasing PCQ buffers or better fq_codel with lower buffer sizes

you can even set 1 packet buffer with PCQ or any other queue type.

for example set 2-kbytes for MTUs in range of 1000-2000 bytes.

Please do not set buffer sizes lower than your MTU. It may cause problems.

volkirik

Try mixing OPEN (none) with WPA2 then.

Thanks & Regards

volkirik

when you have virtual wireless interface and wireless security does not match main wireless interface's security,; this bug occurs.

hope this wireless driver bug can be fixed. thanks!

best regards & wishes.

volkirik

However, different wireless drivers do interact with passing frames beyond basic MAC addressing and some drivers might burp on frames they don't recognize. I think the problem is that the drivers have to do some kind of workaround to replace ARP. The WiFi has the same MAC for all clients, but they ...

volkirik

rc3 is available for testing. if you get support ticket response indicating that your bug-report is FIXED, you may try this experimental testing release

https://box.mikrotik.com/d/c1ce5f170ea1467db0d2/

no changelog. no warranty. experimental.

volkirik

You do not need to change addresses...

Just use src-nat action in src-nat chain and type source ip address of mikrotik router for NAT'ing.

Masquerade action is buggy.

volkirik

src-nat and masquerading are the same thing, in the first case you force the IP to use and in the second it is automatically assigned by the router.

wrong; please read wiki. masquerading is incompatible with failover. connections break. with src-nat action they resume.

volkirik

use action=srcnat instead of masquerade in Firewall->NAT (so connections can always resume).

source: https://wiki.mikrotik.com/wiki/Manual:I ... Masquerade

volkirik

there is a bug in IP firewall mangle.. do not use routing-mark selector "main". it matches everything.

MT support said they are implementing "no-mark" selector for routing-mark selection

volkirik

Maybe You need to use mark-routing fw mangle rule OR routing->rule for outgoing traffic?

volkirik

I found a link from Huawei, https://support.huawei.com/enterprise/en/doc/EDOC1100064352/a4a798cb/calibrate-noise-floor-threshold They do not allow positive values for noise-floor-threshold.. Setting noise-floor-threshold may help stability but offers less speed. IMO, setting very high values screw u...

volkirik

sure why not

volkirik

Unfortunately UGLY mobile operators go UGLY about IPsec keepalives, too.

volkirik

okay, thanks for your response..

then here is a feature request

allow to set special connection timeout for VOWIFI ports (UDP/500 and UDP/4500).. instead of generic UDP timeout..

many people cant increase UDP timeout because it is used for Denial of Service attacks..

volkirik

set 3 minutes for TCP established and UDP stream.. and set maximum of 15 seconds for all other timeouts and be done with that. if anyone complains tell them to enable connection keep-alives... then you got rid of garbage. same applies for ARP garbage..; /interface bridge set [find] arp-timeout=15s a...

volkirik

HardWare MODEL REQUEST

L009 with 5ghz support or 4011 with .ax support

volkirik

If you used simple or interface queues, you will see lots of packet drops and retransmits, which are usual for TCP to tell server/CPE to lower the rate. TCP congestion avoidance [Reno, new Reno, Cubic, Compound, ...) and queue rates, and Access List TX/RX rates, are not, and are not related to wifi...

volkirik

And if station roaming means, unlocking from set frequency, and loss of the link, they could disable it altogether on station mode.. I am open to discuss your ideas. What do you think? We disabled it on stations, to be able to solve loss-of-strong-signal. For example, in mobile (GSM) phones, it can ...

volkirik

My WISP friends tell me that use another brand for home setups, for sure.. Maybe thats because you cant set distance between 1-1000 meters? lots of disconnects due to ACK timeout? I can understand that MT ROS is optimized for PtP long-distance links, but they could simply allow 0.N in distance,, for...

volkirik

On wireless; "indoor" means 150 feet (46 meters) while outdoor means 300 feet. then you set "any" in "Installation". I see indoor/outdoor/any under 'installation'. Then there is indoors/dynamic for the 'Advanced Distance' AFAIK and experienced, the installation "a...

volkirik

dont forget to disable station-roaming on CPEs; if you dont have multiple APs

you can also use wireless access list (for connection of clients) / wireless connect list (for connection to APs), there you can setup allow-signal-out-of-range for 15 seconds?

volkirik

On wireless; "indoor" means 150 feet (46 meters) while outdoor means 300 feet. then you set "any" in "Installation". set wireless-advanced-distance = 1 km instead of indoors or dynamic, then you get higher ACK timeout, but probably less speed. set on-fail-retry-time=0.1...

volkirik

I suggest MT Team to get IPVanish account for testing OVPN and try to get it working with their latest ROS. They can also write tutorial on their Wiki.

I hope they can add OPENVPN Scramble support, too. Better implement it, ASAP.

volkirik

OVPN fixed ???

Nope. Anything going out to OVPN interface is marked "invalid" by ROS' firewall. Even if they are properly routed and NAT'ed.

RX counters show all zeros. Somehow TX queue is also FULL

volkirik

Default (1514 bytes) corresponds to the Ethernet MTU plus the hardware header length of 14 bytes.

sfq-perturb should be 4294967295 s; somehow it is not disabled if you set 0s.

volkirik

i didnt find any explination in mikrotik documentation about this CE threshold thing.
so please advise me..!

Marks packets above a configured threshold with ECN. (congestion encountered)

I use 1600000 µs = 1600 ms = 1.6 second. YMMV

volkirik

yes, but it is alpha, alpha should be older than beta....and there is no changelog so it is woth to try it?

unfortunately, there is no changelog. but please re-read my post, build time is newer (later) than beta2. so it should be fixing beta2 bug.

volkirik

there is newer alpha (development) release (with build time of 16:17:11) on mikrotik website..

you may need to check it out before reporting issues

https://box.mikrotik.com/d/c1ce5f170ea1467db0d2/

volkirik

get 7.11alpha (development) for testing

https://box.mikrotik.com/d/c1ce5f170ea1467db0d2/

contact support for feedback

volkirik

Dear Mikrotik Team;

Please fix OPENVPN, its time for 7.11 beta1

volkirik

You will also need to use Routing->Rules instead of firewall mark-routing to be compatible with FAST-TRACKING For a resource-intensive script, See also; https://forum.mikrotik.com/viewtopic.php?p=1001255#p1001255 You may also choose to route all traffic or selected prefixes via OPENVPN, using Routin...

volkirik

41 bytes security layer overhead per packet (includes packet tag (1), HMAC-SHA1 signature (20), initialization vector (16), sequence number (4)) 28 bytes tunneling overhead per UDP packet (includes IP + UDP header) OR 40 bytes tunneling overhead per TCP packet (includes IP + TCP header) so, in concl...

volkirik

*) ovpn - improved system stability;

not to sure what u mean by that. On v7.10 ovpn is totally broken

indeed. doesnt even show local & remote addresses

lets hope stable ovpn in next release..

volkirik

wifi seems running on RouterOS, no error/warn log in system log, SSID is invisible. lots of disconnects.

Please fix wifi, thanks.

volkirik

Yes we can expect.

There are other vendors supporting ipv6 fasttrack

volkirik

16 mb flash chips should be cheaper than 32 mb. they count each and every penny

sad, but it is trading. if it is working, they will use it.

volkirik

Hi, I had another error login with WiFi on this 7.10beta8. It has been reported as SUP-116195. Mobile can not join WiFi mobile say the password is not correct and after reboot all is OK and mobile can join the WiFi without any chage. Im using only WPA/WPA2. I will go back to ROS7.8.. same here. i c...

volkirik

I have been seeing lots of retransmissions in WireShark's latest builds, too. It was solved after changing from SFQ to PCQ which is apparently FIFO based. anything not-FIFO-based screw up packet order. dunno why SFQ is the default for wireless.. I thought I should share the know-how/experience. Ther...

volkirik

Okay boss.

volkirik

the topic is not solved or closed! so I responded!

are you a moderator, questioning me?

volkirik

you need to use FIFO or better: FIFO based PCQ with 4 classifiers checked (enabled) which are: dst-ip, src-ip, dst-port and src-port. I call it PCQ-FULL this way packets will be in order. you may increase buffer (cache) as much as your router's HW resources allow to increase throughput. do not use S...

volkirik

is it the time for 7.10 next beta release? or rc1? . Absolutely NOT! Let the dev team take the time they need to get it to the closest to stable conditions. There's absolutely no need to rush anything :) alpha, beta, and rc releases do not have to be stable.. actually they could release alpha's in ...

volkirik

is it the time for 7.10 next beta release? or rc1?

volkirik

Linux has wide-range of selector for applying Routing Rule

https://man7.org/linux/man-pages/man8/ip-rule.8.html

Please implement them in ancient quirky MT ROS

thanks and regards

volkirik

read #74 and #75 in this topic. it is slower and you know it. why act a fool?

volkirik

How is this even relevant to this topic? How is LATVIA's IPV6 availability even relevant to IPV6 fasttrack implementation if you are routing " the world "? If you dont have IPv6, buy an IPv6 prefix, AS Number from RIPE LIR and bgp-supported virtual machine in europe. then you can test eac...

volkirik

You have test lab. share IPV6 test results so we can get to know what we are buying if we buy 5009 series..

we are not interested in bridged performance as we are not buying a switch. but a router.. so IPv6 routing performance is what to look.

You are over-promising.

volkirik

whoever wants to do the work, finds the result; Those who don't want to, find an excuse.

I am paying customer (both cloud and physical), you are the responsible party to test the feature.. I do not have test lab.

In my SOHO setup with HAP AC, I get 68M/100M for IPV6/IPv4, YMMV

volkirik

Percentage of TLDs with IPv6 nameservers: 98.5% Percentage of TLDs that have nameservers with IPv6 glue in the root zone: 98.3% Percentage of top 1000 Usenet Servers with direct addresses with IPv6 support: 41.56% Percentage of ASes (IPv4 or IPv6) running IPv6: 38.7% Percentage reachable IPv6 rDNS ...

volkirik

I proposed extra package to be able to use IPV4 FASTTRACK with VPN protocols. wrote an example script, but it is resource-intensive.. Contacted MT support for proper implementation (kernel module or userspace application as extra package or bundled with ROS) nobody cares... and first I got response ...

volkirik

I use default routing.. You do not need anything else if you are single-homed SOHO. You can continue your obstinacy about not implementing V6 F.T. I dunno what people @ ros development are doing more important. With your company's products and ancient quirky ROS, it is like buy gigabit hardware and ...

volkirik

can this thing (L009) "route" 1 gbps link-rate ipv6 traffic? no. why would I pay same price for gigabit ports if I can not utilize them because your ancient quirky software lacks IPV6 FastTrack and IPV6 RouteCache? Even TPLINK gaming routers are faster than mikrotik nowadays if you dont ne...

volkirik

you could just keep port count @ 10 ports. Cost per port is simply increased.. Not everyone need gigabit..

and you respond with "pay even more to upgrade more expensive models..."

volkirik

ipv6 fasttrack is not available in RouterOS, so there are better alternatives, too..

volkirik

coz ownership cost per port is apparently higher?

volkirik

@normis
Regarding submitting time people are complaining about - just change scripts execution order, first post and then announce it in the background (asynchronously).

+1

volkirik

Please disable notification... Too much time... 7~10 seconds every post... Maybe it's better to wait for the switch to the new server? There are phpBB forums with millions of posts and active notifications that are not so slow when posting a message. totally. couldnt agree more. time to check buyvm...

volkirik

It is not a bug, it is a feature... at a cost.

volkirik

for god's sake. let them decide themselves!

you are not sending them anything if they are not subscribed!

volkirik

you can turn-off in your own browser. there are people using it. for existing notifications disable on https://forum.mikrotik.com/ucp.php?i=ucp_main&mode=subscribed set NO to Notify me upon replies by default in https://forum.mikrotik.com/ucp.php?i=ucp_prefs&mode=post to prevent further auto...

volkirik

https://flarum.org/

Modern, fast, and free!

It is successor of FASTEST FLUXBB, man..

volkirik

alternatively use my following script to import (sync) an address-list into routing-rules table.. then you can fasttrack PPTP and you will not need to mark-routing. remember to add ; SRC:(empty) DST:LAN table:main routing rule, manually for the incoming traffic.. :local LANaddr "192.168.88.0/24...

volkirik

Unfortunately, it is not possible, linux kernel does not support address lists in route rules. Māris B. but you can write kernel module or user-space program to sync address list into route rules and remove them when address-list entry times out example script: https://forum.mikrotik.com/viewtopic....

volkirik

hello dear mikrotik team could you please allow to specify firewall address list in routing->rules? fasttrack doesnt work due to mark-routing rules, but we can use routing->rules page, if you add ability to specify dynamic address list for a routing rule. this will be nice speed improvement for VPN ...

volkirik

bug-report:
endpoint-independent-nat:
connections timeout in 10 seconds, instead of 3 minutes (udp stream timeout)

volkirik

bug-report : endpoint-independent-nat: ether1 (wan port) has one static IP address to reach modem's WEBUI that is in bridge mode: 192.168.0.2/24 ether1 (wan port) has one dynamic IP address to reach internet via DHCPv4 client: 178.233.176.XX/20 if i disable static IP, endpoint-independent-nat works...

volkirik

no mention of ipv6 fasttracking.

cpu powers are not enough to utilize 1gige in standard tracking.

volkirik

you need to exclude vpn from fasttrack. (or accept before fasttrack rule in filter tab)

Or use Routing->Rules instead of firewall's mark-routing..

volkirik

had some problem.. apparently mark-routing is incompatible with fast-tracking and I needed to exclude VPN from fasttrack rule, speed is back to normal..

volkirik

set sip-timeout to 3 minutes (default) and exclude service-ports from fasttrack (action=accept before fasttrack rule) so ALGs could do their work..

it works for me..

volkirik

Time for 7.10 beta?! I requested 7.10alpha. and the response was negative. :D Hello, Thank You, for contacting Mikrotik support team! The answer to Your inquiry is - no. We are not at liberty to provide You alpha or beta builds of our software. All the publicly available software is listed on Mikro...

volkirik

does anyone have 7.10alpha release for mipsbe?

volkirik

After upgrading, I'm getting these: invalid mtu 9086 on sfp-sfpplus1 from fe80::ea5c:aff:fe83:f43c .. warnings. Not sure what to do about it, since it's the upstream gateway to the router and I have no control over it, and the interface is set to mtu 1500. Same here. I've been getting "radvd, ...

volkirik

but RFC states that Exactly, this is talking about the LACK of TCP Open support on old OSes at the time AND on NAT devices, aka MikroTik which clearly doesn't support TCP NAT punching. 100 different people in this thread have shown Cisco, Huawei, Juniper all support full cone NAT for both TCP and U...

volkirik

I edited my post,
but RFC states that

"Simultaneous TCP Open" is not implemented correctly on many systems, including NAT devices.

volkirik

RFC allows UDP , TCP and ICMP

volkirik

IPv6 Works OK for me without packet-loss.

Upgrade from 7.8 to 7.9 did not broke my interface-lists.

volkirik

GRE,GRE-key,GRE-sequence-number,PPPoE,IPv4 ; 1500-4-4-4-8-20 = 1460 Bytes https://baturin.org/tools/encapcalc/?protocols=GRE,GRE-key,GRE-sequence-number,PPPoE,IPv4 Thus, the default MTU/MRU is 1460 for PPTP. https://wiki.mikrotik.com/wiki/Manual:Interface/PPTP TCP connection is seperate from GRE Tun...

volkirik

I checked on several PCs and found on all of them that only one ip interface listens to multicast [FF02::1]:5678 when I use winbox. For example, if a PC has a wireless and wired interface, it can only listen on the wireless interface, and if you connect to the Mikrotik via cable, then the router in...

volkirik

I'm sure that they can improve the feature in the future.

it is called "Simultaneous TCP Open" sessions in RFC

volkirik

Up...

any news?

i also suffer from this bug.

volkirik

thank you. appreciated.

volkirik

+1...

volkirik

Hello bpwl !
what do you suggest? that is reasonable?

volkirik

still no ipv6 fasttracking? you are loosing market-share

volkirik

/interface wireless access-list
add signal-range=-85..120
add authentication=no forwarding=no signal-range=-120..-86
/interface wireless
set [ find ] default-authentication=no default-forwarding=no

# source: https://www.youtube.com/watch?v=1kWV7UahBok

volkirik

add clamping rule in firewall for TCP-SYN and then
add accept rule for SYN so they are excluded from FASTTRACK'ing
IMHO

volkirik

set factory default of SIP timeout to its default : 3 minutes.

anything above that hurts.

volkirik

hello,

i would like to request dynamic queues like dhcp for dot1x.
so every devices connected will create dynamic queues according to the parameter given on radius.
do not forget others parameter like insert before, parent queues, etc

cheers

P

+1 for this one.

volkirik

i suggest setting default (factory) value of SIP TIMEOUT to 3 minutes (by default). hope we can see it in next releases. Most routers use 3 minutes udp session timeout. when SIP timeout is higher than 3 minutes, keep alive packets or reconnections will not happen. and this will make your phone numb...

volkirik

i suggest setting default (factory) value of SIP TIMEOUT to 3 minutes (by default). hope we can see it in next releases. Most routers use 3 minutes udp session timeout. when SIP timeout is higher than 3 minutes, keep alive packets or reconnections will not happen. and this will make your phone numbe...

volkirik

it is their market share and they are laughing at it.

ipv6 was introduced 27 years ago. most competitors have fast-track support now.

volkirik

no ipv6 fast-track? really?!

volkirik

ipv6 fasttrack support is late

please mikrotik team

volkirik

ipv6 fasttrack support please

volkirik

IPv6 Fasttrack support, please

volkirik

[feature request] pppoe-relay and broadcast-relay could be extra package possibly bundled with other relay daemons [feature request] ipsec alg (helper) [feature request] dhcpv6 server - address (/128) distribution [feature request] dhcpv6 client: ability to change DUID manually would be useful if y...

volkirik

alternatively add mangle - clamp-to-pmtu in output chain. it should work.

volkirik

Hello Dear Mikrotik Team, ipv6 nat does not work correctly with Simple Queues We Use ULA addresses inside our network, with SRC-NAT rules to real IPv6 addresses in IPv6 Firewall's Mangle Tab. But Simple queue for fd00::/8 does not work. UPSTREAM rate is zero, even if packets are marked by Firewall f...

volkirik

maybe routing loop if you use mark-routing rules. check them

volkirik

+1

When they first added VRF support to services, was surprised it only supported one VRF and not multiple

appreciate your support.

thanks a lot!

volkirik

up..

most wanted..

volkirik

+1 for this feature

#[SUP-93321]

volkirik

[feature request]

regarding wireless ANI feature; add one another choice line below: REQUIRED or just ENABLED.

volkirik

[feature request]

Please add;
expired DNS cache size
and
expired DNS cache TTL

and fallback to expired storage when resolver is unable to resolve something.

something like recycle bin

thanks for reading, regards

volkirik

+1 for this feature request

volkirik

[feature request]

Please add target and destination to queue tree rules

Please add 'any' packet mark matcher to queue tree.

volkirik

saving money as much as possible is nobility. i disregard "buy more powerful router" advices.

+1 for this feature. please implement it, mikrotik guys.

volkirik

[feature request]

please add TCP_RTO_MIN, TCP_RTO_MAX and the tcp_retries2 settings

volkirik

[feature request]

please add wireless DTIM and beacon interval setting.

volkirik

[bug report] 4 uplink with 4 VRF each had add default route feature with distance:10 VRF confuses and one pppoe interface has TX drops and shows RX bytes/bps: 0 thanks for reading hope it can be fixed. changing default route distances fixes the problem temporarily. i guess VRF conflicts with ECMP. f...

volkirik

[feature request]

Please add clear-DF and strip-IPV6-options actions for IPv6 firewall (mangle)

volkirik

[feature request]

Please add routing-table support for ping and traceroute

volkirik

OK BOSS!

sorry for thanking here. ;P

volkirik

useful information, thanks

volkirik

[feature request]

The multi VRF support in IP->Services would be great.

volkirik

excellent.. bravo!

i will fork and maintain it..

volkirik

[feature request]

configurable looking glass package for ROSv7

thanks

volkirik

thank you, very useful

without romon secret, romon ssh still requires authentication right?

volkirik

Why so many topics for features? There is even special one started: viewtopic.php?t=45934

added to my bookmarks.

volkirik

thanks it worked

volkirik

[feature request] dhcpv6 client: ability to change DUID manually

would be useful if you have lots of links from same provider.

volkirik

[feature request] dhcpv6 client: add system ipv6 address from bound prefix

with option to announce it. and option to choose local interface for announcement.

volkirik

[feature request] dhcpv6 server - address (/128) distribution

volkirik

OKay thanks

volkirik

i am repeating... i do not have to escalate the bug. i told how to reproduce it.. i do not have to send my topology and all.. we have NDA with the company without exceptions to MT. sorry.

volkirik

i am not being dick

do not use interface(-name) or interface-list

create address list with LAN prefixes... (192...., 100...., 10....)

use src-dst address list.. for matching traffic. in mangle.

all combinations create routing loop

thats how to reproduce, at least in our rb4011

volkirik

if they have testing labs, well then, they have enough evidence of bugs from the forum

let them invest in bug-finding and fixing. i am not responsible for escalation.

volkirik

whatever

volkirik

nope. they are not friendly IMO.

I would rather wait for somebody else to report it.

volkirik

you can create address list for advertisements and null route them by DNS

volkirik

if you are using free software, it would probably be STABLE when it is EOL!

lol.

MT guys usually fix bugs after months

routeros is not cisco/juniper router software as we all already are aware.

volkirik

up!

definitely need this..

volkirik

useful guide using bridge as temporary solution. but we definiftely need proper implementation of changing VLAN MACs so we do not end up hundred of useless bridges in our router. BTW try updating wiki pages instead of deleting. you can also put notice/warning if guide/content is no more valid/usable...

volkirik

good news and bad news together do not use address-lists. use in-interface-list. it will work using address-lists currently causes routing-loop ; in and out interface becomes WAN interface.. we have been droping WAN to WAN connections in forward chain. thats how we found the issue.. must be fixed by...

volkirik

*) firewall - fixed "in-interface-list" matcher when VRF is used;

but; its still broken somehow IMO

we experience lots of random packet loss when VRF is used.

volkirik

flaky. lots of packet loss.

VRF needs improvement

volkirik

Now it gets even more weird, the fix is not listed in the 7.5beta8 change list either... I would expect it to be at least in the next beta when it is fixed in stable already. (and of course I am disappointed once more w.r.t. BGP fixes) A Beta changelog contains changes from the last stable release....

volkirik

same here.

indeed weird that its fixed in stable channel while not in testing.

volkirik

+1 for this

volkirik

this design must be fixed sir!

volkirik

bug report:

ppp on-up and on-down scripts do not run when they have empty line after their (script)name in profile window.

please fix it. it was annoying.

volkirik

this is a bug in ROSv7 that needs to be fixed...

fallback to main routing-table is not working...

volkirik

up

attention please

volkirik

found on web. most common 3 ports i would guess.

volkirik

we are running WISP setup with ROSv7.5beta4 running on both PPPoE server and PPPoE clients. if wlan1 goes down, pppoe client also goes down but its ipv4 address stays in /ip address menu as stuck... so we wrote a script to remove dublicate address to prevent "error: could not add address: alrea...

volkirik

set rtsp disabled=no ports=554,8554,7236

volkirik

i think there is a problem with that approach because raw rule still catch and process all traffic, so it will not give the boost fast-track provides for example: ccr1036 8g 2s+ can forward almost 20gbps of internet traffic in routing mode with conn-tracking enabled and some ip firewall rules thank...

volkirik

if it is not supported then it is simply not supported.

dsl - atm/ptm - pppoe are different layers. if atm is not supported it will simply not work as ADSL has to use ATM.

volkirik

lol. does this thing even support ATM (ADSL) ?

thought just VDSL (PTM)

volkirik

+1 for this

volkirik

+1

please consider IPv6 FastTrack

volkirik

feature request: ability to choose multiple VRFs in IP->Services items.

we use quad homing from same provider, we had to use VRFs to prevent IP conflicts.

But IP-Services are not available in multiple VRFs. we would request this to be implemented

Thanks and regards

volkirik

CLI does not hang. sorry for typo

Winbox Queue Tree window hangs (becomes empty)

thanks and regards

volkirik

hello there we use queue-tree on pppoe-in interfaces to apply customer limits... we do not limit upload (upstream traffic). BUG REPORT: queue-tree CLI modify(set cmd), enable, disable causes hangs and freeze on router QUEUE TREE tab. for example if we modify using CLI; /queue tree set [find name~&qu...

volkirik

We are experiencing a bug with RouterOS v7.x versions No matter static or dynamic default routes we use,; we have two uplinks (dual homing). If one uplink interface goes down due to maintenance or something else... the other one becomes active without ECMP feature as expected... but it doesnt have E...

volkirik

/ip firewall address-list add address=10.0.0.0/8 list=LAN_addresses add address=192.168.0.0/16 list=LAN_addresses add address=100.64.0.0/10 list=LAN_addresses /ip firewall mangle add action=mark-routing chain=prerouting comment="mark-routing:main (LAN)" src-address-list=!LAN_addresses dst-...

volkirik

And does it do anything useful? It seems that it just randomly(?) picks one, so it's not very useful. ¯\_(ツ)_/¯ is the OP request... i dont request random interface selection. we have 5 wan interfaces currently (and it is increasing). all of them are in WAN interface list. I just want upnp service ...

volkirik

feature request: UPNP interface list support we have multihoming setup and each wan interface has NAT enabled. I would request if you can add interface-list support to UPNP server? for example we could setup LAN as internal and WAN interface-list as external and it would add firewall rules with int...

volkirik

ecmp ipv4/ipv6 is broken in ros v7.

hope you can fix it, i reverted back to latest stable of ROSv6

volkirik

sorry sir

volkirik

italian is sympathetic language

volkirik

caratteristica importante che deve essere implementata immediatamente

volkirik

Two links from forum:
viewtopic.php?t=43517 - Feature Request: IPv6 Hotspot support
viewtopic.php?t=102897 - IPv6 Hotspot (AAAA DNS Filter Workaround) [SOLVED]

+1 for this feature

volkirik

glad you made peace.

i love cats, too.

volkirik

if i was really a troll i would have already replied to @fragtion

i would sign it if i could

so if there is any chance, i would also like no-replies from you.

volkirik

This is user forum, not support forum, and is bad if the user have some problems and do not ask official support for that.

yeah whatever. you must be right, in own way,

do not forget to troll new release topic's bug posts.

volkirik

appreciate your comment @fragtion. thanks.

volkirik

i am not violating forum rules. i have already reported to support.

volkirik

erm, i was expecting bugfix release on fast ring, if possible

volkirik

ROS 7.3beta33: change default logging rule of info, to info & firewall create a system logging rule of firewall and disable it. all logging functions stop. conflicting rules should not stop logging daemon. SWOS 2.13: Mikrotik S-RJ01 is locked to 1 GBPS couldnt run it on 100 mbps on new RB260GSP...

volkirik

In the future we might enable also layer4.

must have. ECMP is the future, imo.

volkirik

must have.

volkirik

Currently?

Only address combination. Different ports get same route

EDIT: WE HAD TO USE PCC FOR LOAD BALANCING, BUT WOULD PREFER ECMP INSTEAD.

volkirik

feature request: ECMP Settings

please add both addresses and ports choice (option) for ECMP under IP->Settings

thanks!

volkirik

They should open source routeros and routerboot just like red hat and sell support service.

Routeros should be merged with openwrt project IMHO

But that's just a dream, because, people are greedy

volkirik

They should open source routeros just like red hat and sell support service.

Routeros should be merged with openwrt project IMHO

But that's just a dream, people are greedy

volkirik

Sad to hear

volkirik

We are real buyers , they are traders

Just register your license into your Mt account

volkirik

I think we need to be more optimist, here..

volkirik

thank you, too, friend!

volkirik

customer services do always count calls, tickets, emails, forum posts etc. and report to their supervisors... you get the idea... the more demand they receive from customers for a feature, the more priority it receives in implementation. dunno about forum rules, i try to be nice and friendly, thats ...

volkirik

they seem to be counting posts in forum imho

so your users/friends can register and post their request in this forum topic

thats all i know.

volkirik

MikroTik support #[SUP-78171]: hello there (regarding RTSP helper) Mon, 28 Mar 2022 17:59:00 +0300 (EEST) Artūrs C. (Jira) <support@mikrotik.com> —-—-—-— Please REPLY ABOVE THIS LINE ^ (for faster response, use our support portal). Hello, Thank you for contacting MikroTik Support. We do not have an...

volkirik

MikroTik support #[SUP-78171]: hello there (regarding RTSP helper) -------- Original message -------- Subject: hello there (regarding RTSP helper) Date: Mon, 28 Mar 2022 16:39:41 +0300 To: support@mikrotik.com hello there we definitely need RTSP helper (alg) openwrt has it. but we love routerOS coul...

volkirik

Be aware that the default action of the routing filter chain is "reject"

further reading = https://help.mikrotik.com/docs/pages/vi ... d=74678285

volkirik

indeed

+1 for rtsp helper (alg)

volkirik

+ 1 for this Feature Request : need IPv6 Fasttrack

volkirik

good job!

volkirik

[feature request]

ipsec alg (helper)

thanks and regards

volkirik

it refresh conntrack timeout each and everytime traffic flows

volkirik

/ip firewall connection tracking set icmp-timeout=30s udp-stream-timeout=6m udp-timeout=30s loose-tcp-tracking=no /ip settings set arp-timeout=20m /ip firewall service-port set sip disabled=no ports=5060,5061,500,4500,3478,45395,50318,59234 sip-direct-media=no sip-timeout=1h /ip firewall mangle add ...

volkirik

I can respect your idea. but keepalive may be disabled or interval may be long, so that doesnt keep connection alive. I had the same problem with my provider TURKCELL, inspected their traffic they never ever send keepalive, nor send ka responses. sorry. prolly ip-firewall-drop rule or misconfigurati...

volkirik

thats the problem. they dont have to enable keepalives

so we need ipsec helper (ALG) to keep conns alive

volkirik

then please email mikrotik guys and request IPSEC alg. other vendors have it.

vowifi (VOWLAN) use IPSEC

volkirik

change udp and udp stream timeout to 1h.

drop connections from WAN that is not NAT'ed.

enable WMM and set priority 7 for udp/500 and udp/4500

works. wish there was VOWLAN helper just like SIP. to keep these connections alive.

Search found 274 matches